$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft File: bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json) Hash identifier: JS/uqdpu7mog+ctkkriTF31ikyf9K1mQG3S69c/Aivs= Subject key identifier: 43:D9:AF:04:D0:B7:0D:4C:83:44:38:25:BF:A8:01:4A:E6:32:22:9B Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 01A0C10C5D37931E9A8E71291D613454D5FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft Manifest number: 0DBE Signing time: Sun 20 Sep 2026 23:00:07 +0000 Manifest this update: Sun 20 Sep 2026 23:00:07 +0000 Manifest next update: Mon 21 Sep 2026 23:00:07 +0000 Files and hashes: 1: 5FHJTMovIyafBSIoWEyalm3rI5M.roa (hash: 7pR5dvgxZrfBVlojZ8DgehqyTZVyIf8AxZ2O6MrCJ8c=) 2: 6E9LTAyzQt1FEPfr7FhyMtAFg2M.roa (hash: TGRGd7XnfyAu8YWaQ6cS2sAir5AhkX//ozfCRednwtk=) 3: 7hJafOPCpVSEdxOE76y6niPbYbg.roa (hash: W1rV0T1F6RwXszjsED1ynOIbEQcRvX19VVt3Nz1sIkc=) 4: BErn-fY5VBXxD2VyEYJN-JdQUW4.roa (hash: suKr1RNc8jf4yYkym4zmqDLZzivo3iXfr9FhGIfjNng=) 5: BUT1NMkorMdojGeQxT5hIJgs8Nc.roa (hash: yZ0THgxl4+lAG7xhsfPweM9P6nUbmimKZfn0DgScC+E=) 6: BfGhYoXLz-5I0FN0nL8DXjOx6EU.roa (hash: Ss4hP6Q3/Oalsvet7/zlDLfrMD1Bv1uUMHsdssewtYI=) 7: DA1lpibgFq5-y_Y3ZxUgcX7RgTo.roa (hash: jnR91XQH0HnolepDmgrXE13NqGBnutXBwTg3aasEMIc=) 8: GVUEDUnF5jUjS5nadTHF8d_a8jM.roa (hash: CNVQH1UrdXTDRK5lM23G9sOU0bUyYlN7wDHyKz8bSA4=) 9: HIFyOEF6o7Rsq5goVjW52OhadgI.roa (hash: k9ek9boUBYYEmOjPJ57YH83oUBsMeWYZC5hDknA/Hs4=) 10: IdbA3ga81eRnRIoyM9ZFsnJoq-0.roa (hash: X6pEz6Y9VtUR71wHETOjVXSfvkgFN13w55bg4lUbPVI=) 11: KlqwNeDSNI-6gcYLBNO5DzJcKIE.roa (hash: Qw0dDm30Ph7VrT6EudqSthxSPTm302Z+oCp8QJLF0jo=) 12: RbdrFxMpPdVSzRp_C-Rku8BRui4.roa (hash: i6eqmLVwiqXYOO52UX4iIvTthJpungIdi65hhhhuuR0=) 13: RuFU5d7ARVr5r4PY4vOdxriie6Y.roa (hash: yyiFBcac7vrMWH3pU/fo+ECKDfP8bGIkfxHEMC+At54=) 14: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: yayHT/H0VaAJr3yGBv3NyrrkBIiWtIimwrTEmpzqgGM=) 15: bVPAHIj80WWce7a3M1XCyh6YdoE.roa (hash: sdPf2Cf+3VFGeiSN/Ap92x67gRehKgw0gxPfYcFUmLA=) 16: lSC4RzevQeRkikifsAt3gR84fxY.roa (hash: CDC2+wQFTPEwC0Sq9Rnp++UpyacRzQctOXOPJvW93xc=) 17: qEbYFQoXre_OuLtdayPj8liTJCA.roa (hash: jvondzJ1t0alplZUpmymkMm3ArgabFjZkTrg9UVcZXU=) 18: rMHgLwq1dgxl2KpsUSthXs0MWBk.roa (hash: Yk8LFVOWtBI6Eap7t4JN9HPbcuGjrW1IcCeKsknRw5I=) 19: xrze8vo27kvzGHLArTlKKxLK6X8.roa (hash: 472z94Y4BGd5ZtO+s4jKvuHuf1XPqa3fnP1IMEj/HWY=) 20: zvxcn_GD8_hUJXGGJ7rjFFwAQB4.roa (hash: AG7WeXLfc9bch8+moQNIG4Gui1kugzTC1jXXmZYVyJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 16:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c1:0c:5d:37:93:1e:9a:8e:71:29:1d:61:34:54:d5:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Sep 20 23:00:07 2026 GMT Not After : Sep 21 23:00:07 2026 GMT Subject: CN=43d9af04d0b70d4c83443825bfa8014ae632229b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4d:f9:51:e0:04:59:af:96:14:eb:4c:35:e4: 9b:6c:5a:e7:d2:f6:36:74:d2:7f:a9:df:3a:ab:85: a1:d4:ae:60:46:a1:c6:2a:8c:7d:3e:85:af:76:05: a5:5f:9a:8f:a2:f5:7d:14:81:0b:75:ca:d9:c1:bd: 89:45:16:67:12:4b:22:bb:e1:59:bf:e4:e7:fb:9b: 8c:14:e5:f9:b5:f3:df:dd:c6:56:e3:8f:4a:eb:02: f5:37:d5:90:ea:51:23:f8:d1:22:3d:19:03:bb:53: c5:09:8b:b4:09:0c:9f:27:5b:1d:9a:89:4a:d7:ec: 9e:e5:b3:1d:cc:2e:ed:27:cc:fa:f2:84:76:78:08: 1c:f8:3d:4d:cf:c1:f1:72:22:60:c3:48:c0:37:7d: da:a0:9c:a9:fb:d6:7f:25:26:63:c8:b7:98:95:c1: 52:f8:96:43:61:b5:43:4b:b6:3e:8f:e2:f7:2f:5e: 1f:c7:0e:ba:1f:68:29:61:6b:ea:d0:ca:4f:5d:24: e1:4f:b8:89:19:a0:d5:b2:2a:b2:f9:73:53:4f:07: 74:06:90:80:ad:6e:c1:95:f5:71:a7:a4:b6:c9:52: f5:87:ce:7d:03:c7:6c:75:5a:e2:ae:01:8b:5c:6d: 3e:f9:a0:df:b6:9d:b9:03:bb:bf:f3:07:82:f8:37: 5b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D9:AF:04:D0:B7:0D:4C:83:44:38:25:BF:A8:01:4A:E6:32:22:9B X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:09:e4:83:88:b6:12:2a:17:8f:54:69:18:1e:1a:ff:67:0a: 9c:54:2d:b9:0c:13:2c:06:cd:a1:0c:d6:f9:27:6f:e4:fd:66: c8:46:d2:c7:16:f7:e4:5d:87:5c:6f:dc:9c:45:28:4c:64:dc: 69:39:c8:2f:0c:61:f9:c2:6d:a4:b2:15:cb:fd:23:1b:71:88: 2a:d0:f6:1e:07:b3:22:76:21:14:d4:58:71:2b:52:69:d8:df: ae:35:a0:f1:20:d1:12:c6:cf:50:6d:6c:7c:16:93:b4:89:e4: 87:35:5e:67:49:55:5c:65:6a:91:91:3c:c9:4a:ed:83:9f:36: 23:89:11:dc:88:44:c9:b3:b1:6a:54:d1:a0:cb:ec:64:78:38: 2c:04:28:cf:14:b8:e5:24:a2:cb:53:b4:74:4d:8a:99:83:7d: 37:b4:05:78:1f:e7:3a:c7:5d:28:a8:b0:b6:0c:8b:d9:42:98: e0:dd:51:e3:ca:c3:09:f4:d4:72:a4:53:b0:a7:13:38:30:4b: 82:86:67:17:bd:d6:7f:c8:3c:7e:db:8e:2b:10:44:4e:03:be: 67:45:de:d7:62:09:60:81:95:fc:c9:d7:83:81:ee:c2:b2:3f: c9:c6:76:62:a5:94:e4:86:48:06:9d:54:12:9d:dc:4d:65:73: db:59:68:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDBDF03kx6ajnEpHWE0VNX7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjYwOTIwMjMwMDA3WhcNMjYwOTIxMjMwMDA3WjAzMTEwLwYDVQQD Eyg0M2Q5YWYwNGQwYjcwZDRjODM0NDM4MjViZmE4MDE0YWU2MzIyMjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3U35UeAEWa+WFOtMNeSbbFrn0vY2 dNJ/qd86q4Wh1K5gRqHGKox9PoWvdgWlX5qPovV9FIELdcrZwb2JRRZnEksiu+FZ v+Tn+5uMFOX5tfPf3cZW449K6wL1N9WQ6lEj+NEiPRkDu1PFCYu0CQyfJ1sdmolK 1+ye5bMdzC7tJ8z68oR2eAgc+D1Nz8HxciJgw0jAN33aoJyp+9Z/JSZjyLeYlcFS +JZDYbVDS7Y+j+L3L14fxw66H2gpYWvq0MpPXSThT7iJGaDVsiqy+XNTTwd0BpCA rW7BlfVxp6S2yVL1h859A8dsdVrirgGLXG0++aDftp25A7u/8weC+DdbbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPZrwTQtw1Mg0Q4Jb+oAUrmMiKbMB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2wnkg4i2 EioXj1RpGB4a/2cKnFQtuQwTLAbNoQzW+Sdv5P1myEbSxxb35F2HXG/cnEUoTGTc aTnILwxh+cJtpLIVy/0jG3GIKtD2HgezInYhFNRYcStSadjfrjWg8SDREsbPUG1s fBaTtInkhzVeZ0lVXGVqkZE8yUrtg582I4kR3IhEybOxalTRoMvsZHg4LAQozxS4 5SSiy1O0dE2KmYN9N7QFeB/nOsddKKiwtgyL2UKY4N1R48rDCfTUcqRTsKcTODBL goZnF73Wf8g8ftuOKxBETgO+Z0Xe12IJYIGV/MnXg4HuwrI/ycZ2YqWU5IZIBp1U Ep3cTWVz21logw== -----END CERTIFICATE-----Generated at Mon Sep 21 01:58:08 2026 by rpki-client